Secure computation system, secure computation server apparatus, secure computation method, and secure computation program
AssigneeNEC Corporation
InventorHikaru Tsuchida
Life of this patent
Estimating the term…
Abstract
A secure computation system comprises at least five secure computation server apparatuses connected to each other via a network and performs secure computation on a value stored while being secret-shared, and each of the secure computation server apparatuses has a comparative verification part that compares values, which should be the same, received from at least three secure computation server apparatuses and that accepts a received value identical to at least another received value as a correct value.
Claims12
A secure computation system comprising at least five secure computation server apparatuses connected to each other via a network and performing secure computation on a value stored while being secret-shared, wherein
- each of the secure computation server apparatuses comprises:
- at least a processor;
- and
- a memory in circuit communication with the processor,
- wherein the processor is configured to execute program instructions stored in the memory to implement:
- a comparative verification part that compares values, which should be the same, received from at least three secure computation server apparatuses and accepts a received value identical to at least another received value as a correct value,
- a pseudorandom function computation part that deterministically generates pseudorandom numbers using a seed and an identifier as inputs and makes a set of masks that sum to zero with respect to a first index and sum to a nonzero value with respect to a second index by using the pseudorandom numbers, and
- wherein the received value is sent while being kept in secret with the masks.
A secure computation server apparatus out of at least five secure computation server apparatuses, connected to each other via a network, for performing secure computation on a value stored while being secret-shared, the secure computation server apparatus comprising:
- at least a processor;
- and
- a memory in circuit communication with the processor,
- wherein the processor is configured to execute program instructions stored in the memory to implement:
- a comparative verification part that compares values, which should be the same, received from at least three secure computation server apparatuses and accepts a received value identical to at least another received value as a correct value,
- a pseudorandom function computation part that deterministically generates pseudorandom numbers using a seed and an identifier as inputs and makes a set of masks that sum to zero with respect to a first index and sum to a nonzero value with respect to a second index by using the pseudorandom numbers, and
- wherein the received value is sent while being kept in secret with the masks.
A secure computation method comprising at least five secure computation server apparatuses connected to each other via a network and performing secure computation on a value stored while being secret-shared, wherein
- each of the secure computation server apparatuses deterministically generates pseudorandom numbers using a seed and an identifier as inputs, makes a set of masks that sum to zero with respect to a first index and sum to a nonzero value with respect to a second index by using the pseudorandom numbers, sends a received value being kept in secret with the masks and compares values, which should be the same, received from at least three secure computation server apparatuses and accepts a received value identical to at least another received value as a correct value.
A non-transitory computer readable medium storing a secure computation program causing at least five secure computation server apparatuses connected to each other via a network to perform secure computation on a value stored while being secret-shared, the secure computation program including:
- a process of comparing values, which should be the same, received from at least three secure computation server apparatuses and accepting a received value identical to at least another received value as a correct value,
- a process of deterministically generating pseudorandom numbers using a seed and an identifier as inputs, making a set of masks that sum to zero with respect to a first index and sum to a nonzero value with respect to a second index by using the pseudorandom numbers, and
- a process of sending the received value being kept in secret with the masks.
Dependencies are inferred from the claim text.